Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed exam-management prompt skill with no executable code, but users should handle candidate records, scores, and certificates under their own privacy and authorization controls.
Install only if you are comfortable using a Chinese-language exam-management prompt. Do not provide real candidate rosters, scores, exam content, or certificate data unless your organization authorizes that use and you have appropriate privacy, retention, approval, and audit procedures outside the skill.
The skill includes certificate generation and issuance as a supported workflow but does not define authorization checks, approval requirements, or fraud-prevention controls. Unauthorized or incorrect certificate issuance can falsely attest competence, damage organizational trust, and create downstream compliance, hiring, or safety risks depending on the certification's purpose.
The skill explicitly processes sensitive exam artifacts and candidate data, including candidate lists, detailed results, and certificate eligibility, but provides no privacy, access-control, retention, or handling guidance. In an exam-management context, this omission can lead to unauthorized disclosure of personal data, scores, and assessment content, as well as noncompliant processing of educational records.
The display name and description are written only in Chinese, with no indication that users can choose another language or locale. This creates a natural-language policy concern because the skill metadata appears to require a specific language experience without documented opt-in or justification.
